Privacy Policy

How we collect, use and protect your personal data.

1. Who is responsible for your data

BAMSTAR TECHNOLOGIES, of UMOJA COMPLEX Capital Round-About Opp. Co-op Bank , P.O. Box 3888-40200 , KISII, Kenya is the data controller for personal data collected through this website. We handle personal data in line with Kenya's Data Protection Act, 2019.

2. What we collect

  • Contact and order details — your name, email address, phone number, and the school, institution or company you represent, when you request a quotation, place an order, or send us a message.
  • Order content — the products, quantities and delivery details on your quotation, and any requisition document or Local Purchase Order you upload.
  • Payment information — M-Pesa transaction references and confirmation details. We do not collect or store card numbers or M-Pesa PINs.
  • Marketing sign-ups — your email address, if you subscribe to offers.
  • Account data — your login credentials, if you register an account. Passwords are stored hashed and are never visible to us.
  • Technical data — cookies and session data needed for the site and your quote list to work.

3. Why we use it

  • To prepare quotations and process, deliver and invoice your orders.
  • To contact you about an enquiry, a quotation, or the status of an order.
  • To meet tax, accounting and regulatory record-keeping obligations.
  • To send offers and product updates — only where you have subscribed, and you can opt out at any time.

We do not sell your personal data, and we do not share it with third parties for their own marketing.

4. Who we share it with

We share personal data only where necessary, with:

  • Safaricom M-Pesa, to process payments you initiate.
  • Delivery and courier partners, to get your order to you.
  • Our email and hosting providers, who process data on our instructions.
  • Regulators, auditors or law enforcement, where we are legally required to.

5. How long we keep it

Order, invoice and tax records are kept for the period required by Kenyan tax and company law. Enquiries and quotations that do not become orders are kept only as long as they are useful for follow-up. Marketing sign-ups are kept until you unsubscribe.

6. Your rights

Under the Data Protection Act, 2019 you have the right to:

  • Ask what personal data we hold about you and request a copy.
  • Have inaccurate data corrected.
  • Ask us to delete data we no longer have a lawful reason to keep.
  • Object to your data being used for marketing, and withdraw consent at any time.
  • Complain to the Office of the Data Protection Commissioner.

To exercise any of these rights, email lab@bamstartech.co.ke or call +254 113356240. We respond within the statutory timeframe.

7. Security

Data is transmitted over encrypted connections and access to customer records is limited to staff who need it to do their work. No system is perfectly secure, but we take reasonable technical and organisational measures to protect your data, and will notify you and the regulator of a breach where the law requires it.

8. Cookies

We use cookies that are necessary for the site to function — keeping you logged in and remembering the items in your quote list. You can block cookies in your browser, but parts of the site will stop working.

9. Changes and contact

We may update this policy; the current version always appears on this page. Questions about privacy should go to lab@bamstartech.co.ke.